Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2817▼ 183 respecto a la semana anterior
Críticas / altas1372▲ 48 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.7) | 0.13% | — | IBM Spectrum Protect ClientIBM Spectrum Protect FOR Space ManagementIBM Spectrum Protect FOR Virtual Environments | 19/7/2023 | 17/6/2026 | IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functionality. IBM X-Force ID: 256012. | |
| Modificada | Media (5.5) | 0.16% | — | IBM Spectrum Protect Client | 30/6/2022 | 17/6/2026 | IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225886. | |
| Modificada | Alta (7.5) | 1.1% | — | IBM Spectrum Protect Client | 30/6/2022 | 17/6/2026 | IBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read operations on TCP/IP sockets. This can result in a denial of service for IBM Spectrum Protect client operations. IBM X-Force ID: 225348. | |
| Modificada | Alta (7.8) | 0.34% | — | IBM Spectrum Protect ClientIBM Spectrum Protect FOR Space Management | 26/4/2021 | 17/6/2026 | IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. A local attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the application to… | |
| Modificada | Media (5.5) | 0.27% | — | IBM Spectrum Protect ClientIBM Spectrum Protect FOR Space Management | 26/4/2021 | 17/6/2026 | IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the application to crash. IBM X-Force ID: 198934 | |
| Modificada | Alta (7.5) | 2.2% | — | IBM Spectrum Protect ClientIBM Spectrum Protect FOR Space Management | 15/6/2020 | 17/6/2026 | IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow an attacker to bypass authentication due to improper session validation… | |
| Modificada | Media (5.4) | 0.82% | — | IBM Spectrum Protect ClientIBM Spectrum Protect FOR Space Management | 15/6/2020 | 17/6/2026 | IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Management 8.1.7.0 through 8.1.9.1 (Linux), 8.1.9.0 through 8.1.9.1 (AIX) web user interfaces could allow a remote attacker to hijack the clicking action of the victim. By persuading… | |
| Modificada | Alta (7.5) | 1.1% | — | IBM Spectrum Protect ClientIBM Spectrum Protect FOR Virtual Environments | 26/9/2018 | 17/6/2026 | IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 148870. | |
| Modificada | Alta (7.5) | 0.97% | — | IBM Spectrum Protect ClientIBM Spectrum Protect FOR Virtual Environments | 26/9/2018 | 17/6/2026 | IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 142649. |